Attorney Docket No: IDF 1560 (4000-03400) 
LISTING OF THE CLAIMS: 



Patent 



1-15. (Canceled) 

16. (Withdrawn) A method for populating password data in a target datastore of a 
target user authenticator after migration from a source user authenticator having a 
source datastore, while also responding to user requests for information, the method 
comprising: 

migrating the source datastore to the target datastore, wherein the source 
datastore comprises user Identification data and user authentication data, wherein the 
source datastore is associated with a source user authenticator, wherein the target 
datastore is associated with a target user authenticator, and wherein the target user 
authenticator is in communication with the source user authenticator; 

intercepting, by an interceptor, a request to the source user authenticator from a 
user seeking access to information protected by the target user authenticator, wherein 
the interceptor prompts the user for an identification, receives the identification from the 
user, locates a corresponding identification in the target datastore, and searches the 
target datastore for a password associated with the identification; and 

determining that there is no password in the target datastore associated with the 
identification: 

forwarding the original intercepted request to the source user 
authenticator, 
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using the source user authenticator to prompt for and receive the 
identification and a password from the user, 

capturing the password provided to the source user authenticator by the 
user in response to prompting by the source authenticator, 

monitoring the source user authenticator for an approval response, 

populating the target datastore with the captured password upon receipt 
by the target datastore of an approval response from the source user 
authenticator, and 

associating the captured password with the corresponding identification. 

17. (Withdrawn) The method of claim 16, wherein after populating the target 
datastore, further comprising prompting for and receiving from the user the password 
associated with the identification. 

18. (Withdrawn) The method of claim 17, wherein the action of prompting for and 
receiving from the user the password associated with the identification comprises 
prompting for and receiving from the user the identification and the password 
associated with the identification. 

19-21. (Canceled) 
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22. (Currently Amendecl) A method for populating password data to a target 
datastore of a target user authenticator after migration from a source user authenticator 
having a source datastore, while also responding to user requests for information, the 
method comprising: 

migrating the source datastore to the target datastore, wherein the source 
datastore comprises user identification data and user authentication data, wherein the 
source datastore is associated with a source user authenticator, wherein the target 
datastore is associated with a target user authenticator, and wherein the target user 
authenticator is in communication with the source user authenticator; 

intercepting, with an Interceptor, a request to the source user authenticator from 
a user seeking access to information protected by the target user authenticator, wherein 
the interceptor prompts the user for an identification, receives the identification from the 
user, locates a corresponding identification in the target datastore, and searches the 
target datastore for a [[password]] user authentication data associated with the 
corresponding Identification; 

forwarding the original intercepted request to the source user authenticator upon 
determining that the target datastore does not include a [[password]] user authentication 
data associated with the corresponding identification; 

using the source user authenticator to prompt for and receive the Identification 
and [[a password]] user authentication data from the user, the target user authenticator: 
monitors the source user authenticator for an approval response, and upon an approval 
response from the source user authenticator, captures the [[password]] user 

authentication data provided to the source user authenticator by the user i n r e spons e to 
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prompt i ng by th e sourc e auth e nt i cator , populates the target datastore with the captured 
[[password]] user authentication data , and associates the captured [[password]] user 
authentication data with the corresponding identification. 

23. (Currently Amended) The method of claim 22, wherein after populating the 
target datastore, further comprising prompting for and receiving from the user the 
[[password]] user authentication data associated with the identification. 

24. (Currently Amended) The method of claim 23, wherein the action of 
prompting for and receiving from the user the [[password]] user authentication data 
associated with the identification comprises prompting for and receiving from the user 
the identification and the [[password]] user authentication data associated with the 
identification. 

25. (New) The method of claim 22, wherein migrating the source datastore to the 
target datastore comprises: 

reading unencrypted data from the source datastore, wherein the source 
datastore contains encrypted user authentication data and other unencrypted data, 
wherein the unencrypted data represents data for multiple users each having an 
associated user identification and an associated user authentication data; 

converting the unencrypted data to be compatible with the target datastore; and 

populating the target datastore with the converted data. 
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26. (New) The method of claim 22 further comprising: 

authenticating the received identification using the target user authenticator upon 
determining that the target datastore includes user authentication data associated with 
the corresponding identification. 

27. (New) The method of claim 26, wherein authenticating the received identification 
further comprises prompting for an receiving from the user the user authentication data 
associated with the corresponding identification. 

28. (New) The method of claim 22, wherein the target datastore is an LDAP 
compliant directory service. 

29. (New) The method of claim 22, wherein the target datastore is a relational 
database. 

30. (New) The method of claim 22, wherein the source datastore is a relational 
database. 

31 . (New) The method of claim 22, wherein the user is a person. 

32. (New) The method of claim 22, wherein the user is a software object. 
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33. (New) The method of claim 22, wherein the user authentication data is a 
password. 

34. (New) The method of claim 22, wherein receiving user authentication form a user 
further comprises: 

prompting for and receiving the identification and the user authentication data 
from the user after the initial submission of the identification from the user. 

35. (New) The method of claim 22, wherein the interceptor is a servlet. 
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